3 ms·
Bought a desktop recently. Thought about setting up verified boot and disk encryption, but... [M]y biggest takeaway was that all of this was quite complicated
by CameronNemo 5y ago
Bought a desktop recently. Thought about setting up verified boot and disk encryption, but...
[M]y biggest takeaway was that all of this was quite complicated and did not really have anything to do with what I bought this system for. So I decided to throw in the towel and flip SecureBoot off.
(See last section here, on trust): https://cameronnemo.gitlab.io/posts/lagomorpha/ https://cameronnemo.gitlab.io/posts/lagomorpha/
- morganvachon 5y agoSecureBoot was as much an attempt by Microsoft to put in place a method to lock out other OSes as it was for local physical security. Most consumer desktop and laptop computer users don't password protect their BIOS/EFI, so an attacker with physical access can simply turn off SecureBoot themselves and then boot whatever toolkit they want to take over the system.